Using the command line

Edit online

You can use the command line to set the SSL level of encryption (in this example to AES encryption with a 128-bit key) issue the command provided here.

About this task

idsldapmodify -D <adminDN> -w <adminPW> -i <filename>

where <filename> contains:

dn: cn=SSL,cn=Configuration
changetype: modify
replace: ibm-slapdSslCipherSpec
ibm-slapdSslCipherSpec: AES-128

See Using Web Administration for other encryption values.

To add more than one level of encryption, your <filename> might contain:

dn: cn=SSL,cn=Configuration
changetype: modify
replace: ibm-slapdSslCipherSpec
ibm-slapdSslCipherSpec: AES
ibm-slapdSslCipherSpec: AES-128

To use the command line to turn off FIPS mode, issue the command:

idsldapmodify -D <adminDN> -w <adminPW> -i <filename>

where <filename> contains:

dn: cn=SSL,cn=Configuration
changetype: modify
replace: ibm-slapdSslFIPSModeEnabled
ibm-slapdSslFIPSModeEnabled: false

You must restart the server and the administration server for the changes to take effect.